5 papers
FirmCure:Towards Autonomous and Adaptive Rehosting of Linux-Based Firmware
Chuan Hong, Zheng Zhang, Lei Zhou +5
Full-system rehosting plays a critical role in the security analysis of Linux-based firmware. It matches commonly deployed firmware with sufficient background knowledge. However, f…
Local LLM Agents as Vulnerable Runtimes:A Source-Code Audit of the Agent Runtime Layer
Zhengsong Zhang, Zongze Li, Jiawei Guo +1
Local LLM agents such as OpenClaw and Nanobot run on end-user machines and act on host resources - the shell, filesystem, browser, stored credentials, and messaging applications -…
LLMBisect: Breaking Barriers in Bug Bisection with A Comparative Analysis Pipeline
Zheng Zhang, Haonan Li, Xingyu Li +2
Bug bisection has been an important security task that aims to understand the range of software versions impacted by a bug, i.e., identifying the commit that introduced the bug. Ho…
What Do They Fix? LLM-Aided Categorization of Security Patches for Critical Memory Bugs
Xingyu Li, Juefei Pu, Yifan Wu +11
Open-source software projects are foundational to modern software ecosystems, with the Linux kernel standing out as a critical exemplar due to its ubiquity and complexity. Although…
An Investigation of Patch Porting Practices of the Linux Kernel Ecosystem
Xingyu Li, Zheng Zhang, Zhiyun Qian +2
Open-source software is increasingly reused, complicating the process of patching to repair bugs. In the case of Linux, a distinct ecosystem has formed, with Linux mainline serving…